$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft File: B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft (raw, json) Hash identifier: mYrONkob8hRdXOLg84vUTLisTDbRmH6NzjTHE2QuHiQ= Subject key identifier: 0C:97:20:D8:FB:55:D1:E6:C0:CB:6F:5D:CD:EC:1F:B9:26:AE:91:0E Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 0E9C28EBF76CECFCCD42492887FDA52262CF5E73 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft Manifest number: 28 Signing time: Tue 12 May 2026 18:15:39 +0000 Manifest this update: Tue 12 May 2026 18:10:39 +0000 Manifest next update: Wed 13 May 2026 21:03:39 +0000 Files and hashes: 1: 3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa (hash: /gTohF8KvDpAztOs0o8krBaVNqaJojl9cS4McTId4nk=) 2: B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl (hash: Vq6wZuxFPJ5HEx8B1TUCWKaT8Y4ojXarPydrhgBFG6g=) 3: 3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa (hash: Sx+7NoTmtU5tLHhBcnSWpMNO747BDHdsVxguRe0fQqw=) 4: 3130332e3233342e35372e302f32342d3234203d3e2034383337.roa (hash: vdF+HI1oNr6kqh078qMmmr8oRIUvuhnWsColzplNCkA=) 5: 3130332e3233342e35362e302f32342d3234203d3e2034383337.roa (hash: 81y+N8iirHBRsPfSRpGYFqPsiFIpyNpIgp6HeQiYS5w=) 6: 3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa (hash: 0AJrwoJqWyS7mm02LUhjXruCkjbSDcdGfNe21l9Twws=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9c:28:eb:f7:6c:ec:fc:cd:42:49:28:87:fd:a5:22:62:cf:5e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: May 12 18:10:39 2026 GMT Not After : May 13 21:03:39 2026 GMT Subject: CN=0C9720D8FB55D1E6C0CB6F5DCDEC1FB926AE910E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b0:7f:a5:bd:39:86:78:5d:f7:7a:a9:20:db: 5e:dc:66:e8:e6:c3:d5:7d:6e:4d:17:a1:16:a8:29: 2f:58:5c:18:3f:df:bb:ea:fd:6a:63:dd:5e:cd:42: 34:fc:04:55:69:5c:6b:9b:af:d0:7b:8b:08:6a:e8: 6c:10:e6:fd:74:50:b6:ad:83:c2:7f:af:97:da:3d: c8:e0:e9:d5:f7:b7:c8:c4:dd:33:d2:83:35:2e:5e: 90:95:90:69:8e:24:6b:ef:3b:d4:5c:2b:82:2f:a3: d1:52:6d:c6:23:d2:a3:4d:23:5c:a2:5b:55:fd:48: c5:7c:9e:56:f3:5b:0e:90:47:c1:e2:4f:55:1f:aa: 15:bd:ee:6b:d0:ee:ea:e9:ff:1d:65:94:28:38:be: eb:8d:f7:58:d7:da:d6:66:b7:7b:29:22:c0:59:0e: 69:0d:2d:94:3e:74:49:24:76:65:60:3c:46:58:67: cb:c6:4f:a8:3a:ac:64:f7:b6:c2:16:79:fb:02:7d: 9a:8f:ce:5c:af:26:62:ef:b2:2a:2a:61:7f:d0:fa: 86:e7:d9:98:94:c7:bf:ee:c2:af:57:73:72:94:28: ab:f3:d7:47:62:4f:b8:bc:c5:b7:c4:65:4c:da:28: 9f:66:fc:48:b5:27:19:4b:d2:45:48:27:e5:06:f7: 6f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:97:20:D8:FB:55:D1:E6:C0:CB:6F:5D:CD:EC:1F:B9:26:AE:91:0E X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:50:33:08:d4:ba:11:25:cf:de:0c:01:71:61:72:df:77:d2: 00:81:4c:40:0d:61:af:9a:f1:31:83:bc:37:7d:a2:00:ef:a0: 39:1b:85:72:b3:bc:88:aa:94:bd:79:90:8b:4a:af:98:1a:5f: 39:8b:ee:92:4b:d6:33:4c:85:ad:eb:6b:2b:45:5a:66:a2:6b: f8:1a:58:4c:d1:af:34:9a:8f:58:f1:f8:12:0f:38:95:dc:da: 6c:68:85:24:d3:63:47:99:3a:c9:8c:a4:7f:66:d5:8c:75:7c: f2:20:e7:5f:ca:38:c1:52:d0:f9:34:6b:e4:02:cb:93:c0:0e: a1:56:f1:eb:80:59:75:e4:61:02:6a:ea:3a:08:6c:23:ef:2e: 6d:f6:37:1e:b1:0a:37:fa:b9:e6:2a:1d:6e:88:33:93:09:33: f4:19:5c:3f:b7:13:28:96:5d:a7:e8:ce:1e:c3:87:c3:b3:cb: 4d:9e:5c:ad:62:f7:de:b5:2f:d8:17:05:a4:fa:17:1b:57:1b: 3c:40:52:35:71:4f:b1:4d:bf:da:21:51:0b:2c:fc:14:45:72: 9b:51:55:f1:3c:86:b0:15:a6:fb:f6:ef:ad:a5:b8:67:86:b9: 76:a2:c4:0c:25:0d:07:f2:3d:3e:c2:7f:26:70:c6:13:c7:45: aa:db:bd:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDpwo6/ds7PzNQkkoh/2lImLPXnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA1MTIxODEwMzlaFw0yNjA1MTMyMTAzMzlaMDMxMTAvBgNV BAMTKDBDOTcyMEQ4RkI1NUQxRTZDMENCNkY1RENERUMxRkI5MjZBRTkxMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMsH+lvTmGeF33eqkg217cZujm w9V9bk0XoRaoKS9YXBg/37vq/Wpj3V7NQjT8BFVpXGubr9B7iwhq6GwQ5v10ULat g8J/r5faPcjg6dX3t8jE3TPSgzUuXpCVkGmOJGvvO9RcK4Ivo9FSbcYj0qNNI1yi W1X9SMV8nlbzWw6QR8HiT1UfqhW97mvQ7urp/x1llCg4vuuN91jX2tZmt3spIsBZ DmkNLZQ+dEkkdmVgPEZYZ8vGT6g6rGT3tsIWefsCfZqPzlyvJmLvsioqYX/Q+obn 2ZiUx7/uwq9Xc3KUKKvz10diT7i8xbfEZUzaKJ9m/Ei1JxlL0kVIJ+UG928/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDJcg2PtV0ebAy29dzewfuSaukQ4wHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgxNzYzODcvMC9CNjg4RTgwRjg5Q0FF QzZBOEM4NEE3RTUxODM4NDI0Mjg3QUJDQTg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFAzCNS6ESXP 3gwBcWFy33fSAIFMQA1hr5rxMYO8N32iAO+gORuFcrO8iKqUvXmQi0qvmBpfOYvu kkvWM0yFretrK0VaZqJr+BpYTNGvNJqPWPH4Eg84ldzabGiFJNNjR5k6yYykf2bV jHV88iDnX8o4wVLQ+TRr5ALLk8AOoVbx64BZdeRhAmrqOghsI+8ubfY3HrEKN/q5 5iodbogzkwkz9BlcP7cTKJZdp+jOHsOHw7PLTZ5crWL33rUv2BcFpPoXG1cbPEBS NXFPsU2/2iFRCyz8FEVym1FV8TyGsBWm+/bvraW4Z4a5dqLEDCUNB/I9PsJ/JnDG E8dFqtu9rg== -----END CERTIFICATE-----Generated at Wed May 13 12:21:20 2026 by rpki-client